Privacy Policy
This policy explains which data the Midnight mobile app processes. By using the app you accept the processing described here.
1. Data we process
Account information
When you sign in, your email address, username and, if any, your display name are stored. When you sign in with Google or Apple, this information comes from that provider. If you registered with a password, the password is never stored in plain text; only its cryptographic hash (PBKDF2) is kept.
Device identifier
You can play without an account. In that case a random device ID generated by the app is used to tie your progress and wallet to your device. This ID is not an advertising ID and contains no personal information.
Game data
Your reading progress, unlocked chapters, choices, diamond balance, purchased outfits/looks, daily reward streak and chapter ratings are stored with your account.
Usage statistics
To improve the app we measure events: story views, chapter starts/completions, scene views, choices, ratings and ad views. These events are tied to your account or device ID; they contain no direct identifiers such as your name or email.
Purchases
In-app purchases are made through Google Play and the App Store. We never see or store card or payment details. Purchases are validated through RevenueCat; we only receive which product was bought and the transaction ID.
Ads
Rewarded ads are served by Google AdMob. Ad requests are non-personalized, which is why the app does not show the tracking permission (ATT) prompt on iOS. Technical data collected by AdMob itself is covered by Google's partner policy.
2. Why we use the data
- To recognize your account and sync your progress across devices
- To verify diamond balances and purchases on the server (anti-cheat)
- To enforce reward limits (daily reward, ad reward)
- To produce aggregate statistics that improve the app and the stories
Your data is never sold and is not shared with third parties for ad targeting.
3. Storage and infrastructure
Data is hosted on Cloudflare infrastructure (D1 database, R2 storage, KV). It is kept for as long as your account is open.
4. Third parties
- Google — sign-in, AdMob ads, Play purchases
- Apple — sign-in, App Store purchases
- RevenueCat — purchase validation
- Cloudflare — hosting and content delivery
5. Your rights and account deletion
You can permanently delete your account in the app under Settings → Delete my account. Deletion cannot be undone: your account and every record tied to it (balance, progress, owned items, sessions) is removed from the server. You can also request deletion, access or correction by writing to privacy@midnightstories.app. Requests under the GDPR and KVKK are handled through this address.
6. Children's privacy
Midnight is intended for adult readers; the store age rating is 17+. The app is not directed at children and we do not knowingly collect data from children.
7. Changes
If this policy is updated, the date on this page changes. Significant changes are announced in the app.